Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
File: wk1b087qqweGzhUaMXja3BB78oA.mft (raw, json)
Hash identifier: 8iU8wno+OjO6sdSbLK3SPDTVUoEeKpA/drsIiCPasck=
Subject key identifier: 8E:CB:BC:28:F8:0F:FE:5D:71:75:7C:6C:04:04:A9:59:9A:07:B5:DA
Authority key identifier: C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
Certificate issuer: /CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Certificate serial: 019D29970F5E5541FA261556514A877C2E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
Manifest number: 169F
Signing time: Thu 26 Mar 2026 10:00:58 +0000
Manifest this update: Thu 26 Mar 2026 10:00:58 +0000
Manifest next update: Fri 27 Mar 2026 10:00:58 +0000
Files and hashes: 1: 8o82eGnMQ9kdXbjLZCmd88Y3NYk.roa (hash: lQLIuazU2M1Mw2xConB6RbtwCMEC7BRrPajBXYv168c=)
2: a3C7IbzkbaswXsbovboq2w9BwGQ.roa (hash: ZSzg7SMIqSibkb5Y6lnFSEbHePc9+LOJ33oGgEo573Q=)
3: sbMhgOAQnNAhPG-zeDNTfwUQSzE.roa (hash: 0fsrSElISGl5fc2Oeen1Zkemgio3HCia7HQB3m6xfVc=)
4: wk1b087qqweGzhUaMXja3BB78oA.crl (hash: lRRzPTS9+5B9b6tFz0MPU0er5vRCVZsmmy0jdQP5z88=)
5: z9e4MYEp5ML-wSYz0dIO1W_R8-M.roa (hash: 9rf8k+M//WSQYyuu/prsp6q1l8xGdsVv2M04htviNLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:0f:5e:55:41:fa:26:15:56:51:4a:87:7c:2e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c24d5bd3ceeaab0786ce151a3178dadc107bf280
Validity
Not Before: Mar 26 10:00:58 2026 GMT
Not After : Mar 27 10:00:58 2026 GMT
Subject: CN=8ecbbc28f80ffe5d71757c6c0404a9599a07b5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:47:23:af:7d:80:5b:ac:d5:ac:47:c5:de:
34:3c:84:4e:86:f9:e6:67:30:73:39:cd:09:7d:cd:
e1:64:85:0a:92:b3:b3:86:f3:f0:c7:2e:b9:71:bd:
a0:f3:79:ac:05:58:a2:0f:0d:0a:f8:8d:f4:bf:fe:
f0:3c:c8:8c:85:bc:af:2d:49:43:19:ca:e4:65:b0:
48:da:64:a0:b2:7d:e8:bd:6c:be:72:86:34:a1:d3:
17:13:23:42:43:ae:55:63:a9:af:86:6f:5d:5d:9d:
de:3a:77:38:c7:a9:49:b8:ce:9c:b1:63:05:91:b0:
de:d5:57:a1:3a:eb:a6:ae:c1:e8:13:62:d2:f5:84:
4b:9a:7d:0d:e6:b6:28:d6:eb:0a:e3:24:f6:65:a1:
7c:95:5c:d8:35:59:a1:d3:82:23:57:5a:2e:67:96:
4c:03:3c:fa:a6:19:9a:58:aa:96:22:ac:56:34:e5:
45:59:82:75:6d:64:56:f9:d1:48:1a:f8:26:d2:2f:
27:8b:3e:33:0e:5d:c4:79:af:89:7d:56:ce:69:0a:
ee:f5:75:80:97:f5:5b:c6:3e:4d:b6:33:9a:3c:93:
5c:3d:74:c4:26:1c:2e:98:53:54:f4:4c:1b:bc:0b:
2d:62:9e:d4:31:d5:83:a9:f5:77:15:44:83:0a:7e:
37:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:CB:BC:28:F8:0F:FE:5D:71:75:7C:6C:04:04:A9:59:9A:07:B5:DA
X509v3 Authority Key Identifier:
keyid:C2:4D:5B:D3:CE:EA:AB:07:86:CE:15:1A:31:78:DA:DC:10:7B:F2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wk1b087qqweGzhUaMXja3BB78oA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e16c1-310f-410c-b341-41d82329f26d/1/wk1b087qqweGzhUaMXja3BB78oA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e2:ab:86:e4:29:7d:26:99:76:26:5c:ef:99:cc:5a:13:3b:
ee:c1:0a:f9:f4:9a:37:16:6a:7f:70:d3:2f:e1:bc:49:ff:1f:
d2:2f:fa:1d:d1:a0:64:b0:ef:51:bc:1e:0a:88:a8:d7:5b:78:
44:58:a2:e9:e5:50:bc:8c:2f:03:fa:56:a5:6c:4f:1d:aa:4c:
e7:f6:a5:58:26:ba:e3:1c:7c:7d:97:48:6d:e1:95:d2:85:fb:
e6:5a:e6:3e:4a:b2:5b:9a:1e:29:85:32:99:1b:9f:21:cd:2f:
ce:96:3d:dd:0b:59:17:8e:a0:d4:f0:89:89:16:37:18:6e:e2:
20:69:5d:be:e1:08:e9:18:79:2c:88:4c:9e:ce:1b:b1:30:d5:
1c:d9:45:39:92:e5:42:d7:b8:8f:9a:a8:48:f9:01:61:50:14:
a0:50:38:b8:2a:9f:00:0a:dd:64:ee:48:44:60:3c:df:7e:43:
50:3e:ea:c6:58:e4:c9:de:91:ff:8d:b1:28:bb:19:4e:00:20:
29:66:33:c4:28:3c:d6:dc:61:e1:0f:38:38:64:ce:3a:fe:62:
58:31:f2:99:67:4d:1f:05:ad:a6:1f:c1:51:79:05:db:d0:a4:
3b:40:3e:84:37:77:78:9a:04:15:c9:a6:98:73:d8:fc:5d:e4:
d6:cf:42:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0plw9eVUH6JhVWUUqHfC4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNGQ1YmQzY2VlYWFiMDc4NmNlMTUxYTMxNzhkYWRjMTA3
YmYyODAwHhcNMjYwMzI2MTAwMDU4WhcNMjYwMzI3MTAwMDU4WjAzMTEwLwYDVQQD
Eyg4ZWNiYmMyOGY4MGZmZTVkNzE3NTdjNmMwNDA0YTk1OTlhMDdiNWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2VHI699gFus1axHxd40PIROhvnm
ZzBzOc0Jfc3hZIUKkrOzhvPwxy65cb2g83msBViiDw0K+I30v/7wPMiMhbyvLUlD
GcrkZbBI2mSgsn3ovWy+coY0odMXEyNCQ65VY6mvhm9dXZ3eOnc4x6lJuM6csWMF
kbDe1VehOuumrsHoE2LS9YRLmn0N5rYo1usK4yT2ZaF8lVzYNVmh04IjV1ouZ5ZM
Azz6phmaWKqWIqxWNOVFWYJ1bWRW+dFIGvgm0i8niz4zDl3Eea+JfVbOaQru9XWA
l/Vbxj5NtjOaPJNcPXTEJhwumFNU9EwbvAstYp7UMdWDqfV3FUSDCn43TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7LvCj4D/5dcXV8bAQEqVmaB7XaMB8GA1UdIwQY
MBaAFMJNW9PO6qsHhs4VGjF42twQe/KAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2sxYjA4N3Fxd2VHemhVYU1YamEzQkI3OG9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS85ZTE2YzEtMzEwZi00MTBjLWIzNDEt
NDFkODIzMjlmMjZkLzEvd2sxYjA4N3Fxd2VHemhVYU1YamEzQkI3OG9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS85ZTE2YzEtMzEwZi00MTBjLWIzNDEtNDFkODIzMjlmMjZk
LzEvd2sxYjA4N3Fxd2VHemhVYU1YamEzQkI3OG9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuKrhuQp
fSaZdiZc75nMWhM77sEK+fSaNxZqf3DTL+G8Sf8f0i/6HdGgZLDvUbweCoio11t4
RFii6eVQvIwvA/pWpWxPHapM5/alWCa64xx8fZdIbeGV0oX75lrmPkqyW5oeKYUy
mRufIc0vzpY93QtZF46g1PCJiRY3GG7iIGldvuEI6Rh5LIhMns4bsTDVHNlFOZLl
Qte4j5qoSPkBYVAUoFA4uCqfAArdZO5IRGA8335DUD7qxljkyd6R/42xKLsZTgAg
KWYzxCg81txh4Q84OGTOOv5iWDHymWdNHwWtph/BUXkF29CkO0A+hDd3eJoEFcmm
mHPY/F3k1s9CoA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:12:52 2026 by rpki-client